Re: SELECT privilege required to compile

->From: walt@mathcs.emory.edu (Walt Hultgren {rmy}) ->Subject: SELECT privilege required to compile ->Date: 24 Aug 1993 13:33:41 -0400 ->Reply-To: walt@mathcs.emory.edu (Walt Hultgren {rmy}) ->Organization: Emory University -> ->We are currently in the final stages of upgrading some applications to I4GL ->and ISQL 4.10.UC2 with Standard Engine 5.00.UC1 under SunOS 4.1.2. -> ->While moving some completed programs from the development to the production ->environment, I discovered that I have to be granted SELECT permission on a ->table to be able to compile a form, or a 4GL program (c4gl) that references ->that table in a 4GL statement (such as "define pr_tbl record like tbl.*"). ->It is not sufficient that I have CONNECT permission on the database, and ->can select from systables and syscolumns. Informix Tech Support confirmed ->that this is the case. -> ->This doesn't seem right, but maybe I'm missing something. It seems to me ->that if I can get to the data dictionary, I should be able to compile. The ->question of access to the contents of the table should be evaluated at ->run-time. -> ->This restriction doesn't pose a serious problem for us, but I am curious ->about it. Does anyone know the rationale behind this requirement? -> ->Thanks, -> ->Walt. ->-- ->Walt Hultgren Internet: walt@rmy.emory.edu (IP 128.140.8.1) ->Emory University UUCP: {...,gatech,rutgers,uunet}!emory!rmy!walt ->954 Gatewood Road, NE BITNET: walt@EMORY ->Atlanta, GA 30329 USA Voice: +1 404 727 0648 Walt, Philosophically, I understand your point about the compiler not needing SELECT permission on the table, as long as it can get to the data dictionary. However, the program cares about the table and not the data dictionary. Now think about the Informix software developers, and how much code they need to create. I can certainly understand the DB interface tool developers only making one mechanism to check access persmissions and using it in both compile and run time code, rather than having two specially crafted mechanisms, one for compile and one for run. I don't KNOW that this is what happened, but it makes sense to me a software developer. Regards, Alan ___________________________ ______________________| R. Alan Popiel |__________________________ \\ Internet: | Martin Marietta, Tech Ops | / \\ alan@den.mmc.com | P.O. Box 179, M/S 5422 | Std disclaimers apply. / )Voice: | Denver, CO 80201-0179 USA | ( / 303-977-9998 |___________________________| (But you knew that!) \\ /________________________) (____________________________\\